Install
$ agentstack add skill-xialangji-debug-codex-skills-agentmd-obsidian-codex-clash-proxy ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Codex Clash Proxy
Overview
Use this skill when a Codex-initiated network command should go through Clash Verge while the user's normal Windows session stays direct. The skill starts Clash Verge if needed, waits for 127.0.0.1:7897, injects proxy environment variables only for the child command, and avoids persistent system or Git proxy changes.
Defaults
- Clash Verge executable:
C:\software\Clash Verge\clash-verge.exe - Local mixed proxy:
http://127.0.0.1:7897 - Optional Clash controller:
http://127.0.0.1:9097 - System proxy must remain off.
- Do not set user-level
HTTP_PROXY,HTTPS_PROXY,ALL_PROXY, or global Githttp.proxy/https.proxy.
Standard Workflow
- Prefer the wrapper script for downloads, dependency installs, and Git operations:
& "C:\Users\84365\.codex\skills\codex-clash-proxy\scripts\run-with-clash-proxy.ps1" -CommandLine " "
- Use
-PreferAutoGroupwhen the task may need Clash to switch away fromDIRECT. This attempts to select the first available automatic/url-test style group through the local controller, if the controller is available.
& "C:\Users\84365\.codex\skills\codex-clash-proxy\scripts\run-with-clash-proxy.ps1" -PreferAutoGroup -CommandLine "git clone https://github.com/example/repo.git"
- For Git, still use the wrapper. It injects per-process Git config through environment variables without modifying global Git config.
- If the wrapper cannot reach
127.0.0.1:7897, inspect whether Clash Verge failed to start or whether its mixed port changed. Do not fall back to persistent global proxy settings unless the user explicitly asks.
Node Selection
Let Clash Verge handle node testing and selection. If -PreferAutoGroup succeeds, it changes selector groups that are currently on DIRECT to an available url-test, fallback, or load-balance group. If the controller is unavailable, continue with the current Clash selection and report that automatic group switching was skipped.
Avoid editing subscription files, node credentials, or remote profile URLs. Do not print secrets from Clash config.
Examples
Clone through Clash only for this command:
& "C:\Users\84365\.codex\skills\codex-clash-proxy\scripts\run-with-clash-proxy.ps1" -PreferAutoGroup -CommandLine "git clone https://github.com/owner/repo.git"
Download a file:
& "C:\Users\84365\.codex\skills\codex-clash-proxy\scripts\run-with-clash-proxy.ps1" -CommandLine "curl.exe -L -o tool.zip https://example.com/tool.zip"
Install Python dependencies:
& "C:\Users\84365\.codex\skills\codex-clash-proxy\scripts\run-with-clash-proxy.ps1" -CommandLine "python -m pip install -r requirements.txt"
Only start Clash and verify the local proxy port:
& "C:\Users\84365\.codex\skills\codex-clash-proxy\scripts\run-with-clash-proxy.ps1"
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: xialangji-debug
- Source: xialangji-debug/codex-skills-agentmd-obsidian
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.